Pixel / Nexus Security Bulletin—November 2017

The Pixel / Nexus Security Bulletin contains details of security vulnerabilities and functional improvements affecting supported Google Pixel and Nexus devices (Google devices). For Google devices, security patch levels of 2017-11-05 or later also address all issues in this bulletin. To learn how to check a device’s security patch level, see Check and update your Android version.

All supported Google devices will receive an update to the 2017-11-05 patch level. We encourage all customers to accept these updates to their devices.

Note: The Google device firmware images are available on the Google Developer site.

Announcements

In addition to the security vulnerabilities described in the November 2017 Android Security Bulletin, Pixel and Nexus devices also contain patches for the security vulnerabilities described below. Partners were notified of these issues at least a month ago and may choose to incorporate them as part of their device updates.

Security patches

Vulnerabilities are grouped under the component that they affect. There is a description of the issue and a table with the CVE, associated references, type of vulnerability, severity, and updated Android Open Source Project (AOSP) versions (where applicable). When available, we link the public change that addressed the issue to the bug ID, like the AOSP change list. When multiple changes relate to a single bug, additional references are linked to numbers following the bug ID.

Framework

CVE	References	Type	Severity	Updated AOSP versions
CVE-2017-0845	A-35028827	DoS	Moderate	5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2

Media framework

CVE	References	Type	Severity	Updated AOSP versions
CVE-2017-0838	A-63522818	EoP	High	7.0, 7.1.1, 7.1.2
CVE-2017-0852	A-62815506	DoS	High	5.0.2, 5.1.1, 6.0
CVE-2017-0847	A-65540999	EoP	Moderate	8.0
CVE-2017-0848	A-64477217	ID	Moderate	5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0
CVE-2017-0849	A-62688399	ID	Moderate	6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0
CVE-2017-0850	A-64836941*	ID	Moderate	7.0, 7.1.1, 7.1.2
CVE-2017-0851	A-35430570	ID	Moderate	5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0
CVE-2017-0853	A-63121644	ID	Moderate	7.0, 7.1.1, 7.1.2, 8.0
DoS	High	6.0, 6.0.1
CVE-2017-0854	A-63873837	ID	Moderate	7.0, 7.1.1, 7.1.2, 8.0
DoS	High	6.0, 6.0.1
CVE-2017-0857	A-65122447	NSI	NSI	7.0, 7.1.1, 7.1.2, 8.0
DoS	High	6.0, 6.0.1
CVE-2017-0858	A-64836894	NSI	NSI	7.0, 7.1.1, 7.1.2, 8.0
DoS	High	6.0, 6.0.1
CVE-2017-0859	A-36075131*	NSI	NSI	7.0, 7.1.1, 7.1.2
DoS	High	6.0, 6.0.1

Runtime

CVE	References	Type	Severity	Updated AOSP versions
CVE-2016-2105	A-63710022*	RCE	Moderate	5.0.2, 5.1.1
CVE-2016-2106	A-63709511*	RCE	Moderate	5.0.2, 5.1.1
CVE-2017-3731	A-63710076*	ID	Moderate	5.0.2, 5.1.1

System

CVE	References	Type	Severity	Updated AOSP versions
CVE-2017-0860	A-31097064	EoP	Moderate	5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2

Kernel components

CVE	References	Type	Severity	Component
CVE-2017-6001	A-37901413 Upstream kernel	EoP	Moderate	Core kernel
CVE-2017-0861	A-36006981*	EoP	Moderate	Audio driver
CVE-2017-0862	A-36006779*	EoP	Moderate	Kernel
CVE-2017-11600	A-64257838 Upstream kernel	EoP	Moderate	Networking subsystem
CVE-2017-0863	A-37950620*	EoP	Moderate	Video driver

MediaTek components

CVE	References	Type	Severity	Component
CVE-2017-0864	A-37277147* M-ALPS03394571	EoP	Moderate	IoCtl (Flashlight)
CVE-2017-0865	A-65025090* M-ALPS02973195	EoP	Moderate	SoC driver

NVIDIA components

CVE	References	Type	Severity	Component
CVE-2017-0866	A-38415808* N-CVE-2017-0866	EoP	Moderate	Direct rendering infrastructure
CVE-2017-6274	A-34705801* N-CVE-2017-6274	EoP	Moderate	Thermal driver
CVE-2017-6275	A-34702397* N-CVE-2017-6275	ID	Moderate	Thermal driver

Qualcomm components

CVE	References	Type	Severity	Component
CVE-2017-11073	A-62084791* QC-CR#2064767	EoP	Moderate	Networking subsystem
CVE-2017-11035	A-64431968 QC-CR#2055659 [2]	EoP	Moderate	WLAN
CVE-2017-11012	A-64455446 QC-CR#2054760	EoP	Moderate	WLAN
CVE-2017-11085	A-62952032* QC-CR#2077909	EoP	Moderate	Audio
CVE-2017-11091	A-37478866* QC-CR#2064235	EoP	Moderate	Video driver
CVE-2017-11026	A-64453104 QC-CR#1021460	EoP	Moderate	Linux boot
CVE-2017-11038	A-35888677* QC-CR#2034087	EoP	Moderate	Memory subsystem
CVE-2017-11032	A-64431966 QC-CR#1051435	EoP	Moderate	Linux kernel
CVE-2017-9719	A-64438726 QC-CR#2042697 [2]	EoP	Moderate	Display
CVE-2017-11024	A-64441352 QC-CR#2031178	EoP	Moderate	Wired connectivity
CVE-2017-11025	A-64440043 QC-CR#2013494	EoP	Moderate	Audio
CVE-2017-11023	A-64434485 QC-CR#2029216	EoP	Moderate	Services
CVE-2017-11029	A-64433362 QC-CR#2025367 [2]	EoP	Moderate	Camera
CVE-2017-11018	A-64441628 QC-CR#897844	EoP	Moderate	Camera
CVE-2017-9721	A-64441353 QC-CR#2039552	EoP	Moderate	Display
CVE-2017-9702	A-36492827* QC-CR#2037398	EoP	Moderate	Camera
CVE-2017-11089	A-36819059* QC-CR#2055013	ID	Moderate	WLAN
CVE-2017-8239	A-36251230* QC-CR#1091603	ID	Moderate	Camera
CVE-2017-11090	A-36818836* QC-CR#2061676	ID	Moderate	WLAN
CVE-2017-11093	A-37625232* QC-CR#2077623	ID	Moderate	HDMI
CVE-2017-8279	A-62378962 QC-CR#2015227	ID	Moderate	Services
CVE-2017-9696	A-36232584* QC-CR#2029867	ID	Moderate	Kernel
CVE-2017-11058	A-37718081 QC-CR#2061251	ID	Moderate	WLAN
CVE-2017-11022	A-64440918 QC-CR#1086582 [2]	ID	Moderate	WLAN
CVE-2017-9701	A-63868730 QC-CR#2038992	ID	Moderate	Linux boot
CVE-2017-11027	A-64453534 QC-CR#2055630	ID	Moderate	Linux boot

Functional updates

These updates are included for affected Pixel devices to address functionality issues not related to the security of Pixel devices. The table includes associated references; the affected category, such as Bluetooth or mobile data; and a summary of the issue.

References	Category	Improvements
A-65225835	Audio	Volume warning threshold adjusted in some regions.
A-37943083	Bluetooth	Improvements for Bluetooth devices only supporting AVRCP version 1.3.
A-63790458	Bluetooth	Improved headset connection pairing.
A-64142363	Bluetooth	Improved song info display on some Bluetooth carkits.
A-64991621	Bluetooth	Improved metadata in some carkits.
A-65223508	Bluetooth	Improved Bluetooth connections to some carkits.
A-65463237	Bluetooth	Improved Magic Tether on BLE.
A-64977836	Camera	Improved Autofocus during video capture.
A-65099590	Camera	Improved front camera response speed.
A-68159303	Display	Adjustments to display color mode setting.
A-68254840	Display	Adjustments to display brightness settings.
A-68279369	Display	Adjustments to navigation bar brightness.
A-64103722	Mobile data	Adjusted YouTube switching from mobile data to Wi-Fi.
A-65113738	Mobile data	Mobile data adjustments on 3 Network.
A-37187694	Stability	Improved application stability.
A-67959484	Stability	Adjustments to call quality.

Common questions and answers

This section answers common questions that may occur after reading this bulletin.

1. How do I determine if my device is updated to address these issues?

Security patch levels of 2017-11-05 or later address all issues associated with the 2017-11-05 security patch level and all previous patch levels. To learn how to check a device’s security patch level, read the instructions on the Pixel and Nexus update schedule.

2. What do the entries in the Type column mean?

Entries in the Type column of the vulnerability details table reference the classification of the security vulnerability.

Abbreviation	Definition
RCE	Remote code execution
EoP	Elevation of privilege
ID	Information disclosure
DoS	Denial of service
N/A	Classification not available

3. What do the entries in the References column mean?

Entries under the References column of the vulnerability details table may contain a prefix identifying the organization to which the reference value belongs.

Prefix	Reference
A-	Android bug ID
QC-	Qualcomm reference number
M-	MediaTek reference number
N-	NVIDIA reference number
B-	Broadcom reference number

4. What does a * next to the Android bug ID in the References column mean?

Issues that are not publicly available have a * next to the Android bug ID in the References column. The update for that issue is generally contained in the latest binary drivers for Nexus devices available from the Google Developer site.

5. Why are security vulnerabilities split between this bulletin and the Android Security Bulletins?

Security vulnerabilities that are documented in the Android Security Bulletins are required in order to declare the latest security patch level on Android devices. Additional security vulnerabilities, such as those documented in this bulletin, are not required for declaring a security patch level.

Versions

Version	Date	Notes
1.0	November 6, 2017	Bulletin published.
1.1	November 8, 2017	Bulletin updated with AOSP links and additional details on functional updates.